Hi, I'm author of pgpverify-maven-plugin, this plugin check pgp signatures of project dependencies.
I have problem how to access/download "asc" signature file from mojo. Currently I use repositorySystem.resolve(...), for artifact with changed file name, but in logs I see, eg: Could not validate integrity of download from https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-ejb-plugin/3.0.1/maven-ejb-plugin-3.0.1.jar.asc: Checksum validation failed, no checksums available My problem code are here: https://github.com/s4u/pgpverify-maven-plugin/blob/master/src/main/java/org/simplify4u/plugins/ArtifactResolver.java#L111 https://github.com/s4u/pgpverify-maven-plugin/blob/master/src/main/java/org/simplify4u/plugins/AscArtifactHandler.java#L56 -- Sławomir Jaranowski
